Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/05/2024, 19:36

General

  • Target

    2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe

  • Size

    1.5MB

  • MD5

    bfac6e7b8d56e5f2c8557d1038c531cf

  • SHA1

    7c44dc04172a643fd7ba0e3b48eb5cd7af9c0ce2

  • SHA256

    5d66f0206bd0c28e2e1fc844e15549bda9592796886417025356d6c0c914f573

  • SHA512

    bdfafac25018758e195f0e15e5c782121a2253267621cbe76d1543a4e98a3e2e066c5f3ffe6a18490544114bd35200aed8e84b2e217972f2a181a3bbcc23cb46

  • SSDEEP

    24576:Tk1H8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:Tk1HgDUYmvFur31yAipQCtXxc0H

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4724
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2164
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3252
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:752
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1900
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:3572
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:1012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    d90871393163565548f27264df499182

    SHA1

    ebc39a0b162b487828b05e09393c892113c6f0ea

    SHA256

    47936d00cba7abcc84fad4033bbec27d88815c9bc22c4803baed40e4c3979c70

    SHA512

    ee979e60f8c92b15cf72d620b6f8e673144be306c7d86151e94b94a229a083e60031131bae912cee0fdf20758987acef8188be1d219b2b74aa33f973b80c20e9

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    1.7MB

    MD5

    442e8ffea2088f65d00a3009fad11b6b

    SHA1

    fb2cd211ab4bf73330bdb708f6d1079b696d59e0

    SHA256

    2846eea566da97822465461352bc781ab12df0b6493ae8b5df6b5efa25fa7865

    SHA512

    256389b7f4d36733359bef7e9ab66a69018e0ccacfb63532d5bc972108fe189f37690510c3ff5059cdd6db11f559f2fd37f6cb9165230f0ab2c918bef62fd134

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    2.0MB

    MD5

    058118d9ce7e3ca3fe807b8c763ef200

    SHA1

    94880d568db00c995846fc65ce2e69a2b95e2bd5

    SHA256

    342bf3144e932575734b125f5f85890aebfc3eadc3c212befe9cdfe83567831c

    SHA512

    2f87425b04561faf86db505797894fb6d1197fc6611e18c1c102bb8e0c91f3862bcd7e4411b45e0d15154d272dd89397000f940d27107f128f5593ded79936be

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    1103a3898a310854109eecb3c329f42d

    SHA1

    0135698cd47106ddab771261463639511e4008e1

    SHA256

    1724206f073608b3db3d18eb0190af94439d2ad6152cda8772eebceefed2788a

    SHA512

    e563b0e08afe064bc9109a1090d0f8a80f7aa4311dd3f03d46d59ffed443283fa1e04ccf72623ab6b25a162075c63a2feee414dbb9cff832ad6f4f6d4b219638

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    4af9ef747a20d155e9ffd25a163064ed

    SHA1

    dd4788277256dbb8c80dbeaef6d8e248ef3cfb16

    SHA256

    0e029f55e86fd6fef2b62fda8ae22813d821865537087c185653fd0bf6d0ccc2

    SHA512

    14a37e2c88b2ebf01b9b1fbf68f783e65502b9225146541d43d4d8320bd8e47cfa0dfa7221a11e5ffad61bf78186f85a9d77f2ad4387827b398c657e6bf670a4

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    1.4MB

    MD5

    453eb8ec2d5824f5f583909c12ee190f

    SHA1

    05adcdba526573ab92d2a4f6a5ef713221902050

    SHA256

    7c8f9d4fb1f8582561cc6faff3901552f8e361177c925cb980a812a90524cc68

    SHA512

    5044aab2f38eb6d7af3fc066844d7c32472bee9a70c651dd239fd6f7dee36288752549838bf352a1c2cc436ea15e95618dc98b2f8b9fb72b25b2fcd1cd81659f

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    1.7MB

    MD5

    9c445636d789f4a450d2f789de4dea56

    SHA1

    72d9abc948a7131ae355831224950459dc3e0c1a

    SHA256

    2000ae739cffbc0811c54c36373e307c51968054215690a24dd6356dce42360d

    SHA512

    05e11ed19fc2b7a4c83edddc7a4deaa7d2226c0886d2f64bfe33f44e9cd21f216d4beedb568aaa59b8df8d263e93da35f7e0094f87fab8a0084a193acbfc7ae5

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    3e3acdac1b9a9a12d24ca13f690e5d2d

    SHA1

    629cbae13f39c4e48d87a51450c68e1d8ef28468

    SHA256

    3bd6c9596b2c5c0694f2c60540e94c59df96a74a428d79ad7ad35657ea16f471

    SHA512

    08282f3111e8138d4699bc1133a82d3487067a48cb2c3d14d9dd7d1df3f2bf58f723c710022e4fcd420509433f50c22f34110393972c5c447c85fbd5bfaf6185

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    1.8MB

    MD5

    c874e37e3c6043302dd8ad8489b6f727

    SHA1

    f0037b393ad263ae814eb8345d8d9e863f65732b

    SHA256

    ba864b418c2d0fd1cfc2ee879618f0b156a8eb70d4d49873c9802a1501421d53

    SHA512

    4799cadbe5c0783efb997cd7777b443856f00baf2d2e5b0b471f3d1364651bbddcf5e651bc4891d9abcf911ba1aa3d8276e572baa937d74f8dac04142c78960a

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    a34b5bb59b48e13f468020124f631a97

    SHA1

    f0c4af97ab3cb8deca84f7b48e0a9d999fab8b1a

    SHA256

    c513ad9b32e439176156dc05b91a69b67e07c66e6b6fbc991a2fbd19733081f4

    SHA512

    b65cede2aa53556e88a6dfdc83e99c3a33e998ef618432b6e4fb3365823e47d7f4d966f4b422b0e4535bc361fe55a575db24fce891d822a7d615a7a24c30ca46

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    92ca65fb99587953fa28bf6184a86163

    SHA1

    cb127eb45dc6c429c829b6d50f295238289a9f29

    SHA256

    ab48b296ce6550a736f66d4fd9dfdeb405f76682e99c01c2ac4c75d67d684f97

    SHA512

    dcecf20cdc50681182173c2027495bb460ed5f66d00e3a2e19062073c66a117f27c6bc43afee54be8ab71ffb027d4f467f9d4122c74809885a5126c7dc18db3e

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    baa9d71aac2eb0097612c60191edb50e

    SHA1

    17e98cfdb44b221789b2bf58ac72d21bad1bc450

    SHA256

    008618efabb0bb11a4984032d1ce808456e12ea32c99586dc7ce785f62c86f7a

    SHA512

    db026c3763e46452877a655065e762f2677a9281f724c8c0cea156cc26b479871717c6750ed02a67bf6c006f708d35acc6f2611de7b5f60071a993c7683113a3

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    1.7MB

    MD5

    43251568aca779b3c3d8d5b15af57285

    SHA1

    9e55d3540405f79946c2a7c31bf682edfe2aab4e

    SHA256

    736c58bbb4620d932f5601e944751857acd1b0384b8b8e01e5d44233b0cf95ef

    SHA512

    35213cc3afd74e36533fc28bd7de9ba04b8994b3c651210d874caaea5b2d9cadd8009720fbd2933dcf79b157e96abc6534c0b51ec40c2146480ee209ca7cd91c

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    1.5MB

    MD5

    2624c8d636bac8f8cbf47c289b34146a

    SHA1

    2f30aef3e0368cdb671d7a2a0c59b34203c5c827

    SHA256

    d869131e5bb68bf7800e3f87040755d5d05d67210185ceb31dcdac8d0c6eff90

    SHA512

    cba6164f2adf175c0c143893b77fa5f36476d6bd6174abccc2aa0555a299cb50dc8b41136d8657e5041ef6d8cf62bc00c1031e554d5cc2c3781b2c98dd2a26c4

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    ff1281bd9d8f5ea4ce565c29778cd1b4

    SHA1

    7b0c579c43319681342e2a4b008ce3b3c7b04620

    SHA256

    5adc734198b1d349afdcaa96587bbc5a61a637952ca76b8b041248d47b93b9c0

    SHA512

    2c0917c62d215d981581c98a51a864ca9b98b22d675c70535f89c49b2f513f10f7bccc4459586f7bed26f5a451ed7cb78efd5b6a4f3a0c1f9c3873387562ebf2

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    0a4c7f78afee6725b9b90fcc6f398d63

    SHA1

    2c6b5a3e027907b7310b18563abb82e700a58e93

    SHA256

    7256f9b214c8a7fec1f4aee0f8bad62d789cefd1579a52cff60e24a03e93ea3d

    SHA512

    2c741dc7d5dc36d5bd38dc5715ea7e4b7ef0d6b2a56181ad33ee147258a4b4ad935ff2c06a14cb3780c5af1dc6f81450f59b1611abaec5dfd859184106bced66

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    d29113b0b4257e8bd5fa738e5dd4c16b

    SHA1

    7c856ae0490b74af6eb9e7128aa9dbaec45fd2ed

    SHA256

    ffa2cb327fbac165791e61f26d92d4c9f42a6bce51d8ee64929c81d6eebb7dde

    SHA512

    5e3970d88d3e5e9c29648d54479a1d2a8d40d7b9077a4d455c7192685f57448bb76c58581c04835d83155869c8f2479a0fc9c532aed5a812499088e8ca42e584

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    9ca02a5517da5f381ab47b0f18702603

    SHA1

    45560e31494c0c6c6132d7fa84d47f99759a5cdd

    SHA256

    49cd1952398b75a0c816055d2dc58ba683ae9815a86345516cf107df4ca61b73

    SHA512

    0292985716dd76f00bac25e9e9ebe6141a1f1c1c17ed66d7386318a31b62d8b616e2810a5cf1cff5c3c344a5d1ff9fb65d96d9fc4f731352f38e744ba5eb4bd9

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    456dae34b3aec2fa6513fd49f7eb643e

    SHA1

    b416dacfa80165aab76a5c4c10e8471bad1076a2

    SHA256

    3cdd03cafe04a1af971361c6b5bd2811dbd930bb57767c73a48fdec96c8d2930

    SHA512

    2ed75cc67f42cd49287b5d64b01796e29f273d130954fb835d5302f4a3345184fae5f61cdbacdc1076f834de11ebd11fef29fc194c4b8e6eb1642c800ad01c10

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    e31cd3e13f61d896de6a4fe162c14923

    SHA1

    e000074b564c7afcb9133ddd20cb1492642f97b2

    SHA256

    17c448d4fa6424941e3bd48c55a5524ca37b64f21a023cad3fa7cb1afae3fbcf

    SHA512

    df3d8132b90fc99d3ae73d03239e6067bed33c61ae6c8f6fd1a9f2ffce67935188b29fbfa38765bea34c23cf04f84fa96e0b3412856c37ec633e8dc90cd053a0

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    1.4MB

    MD5

    0a9b4caafdcf202b608d77909c927644

    SHA1

    e1c53ec5328ce3da86378a8d29b82d1ee1eaeaf7

    SHA256

    e523ed3804c67d03785d9d0487d7fbdce7a0bd948e14df19d9eb391e3ac204b2

    SHA512

    9e7ff5389904a4688670446246d217b4a82400301298d3c582fe8f57b94924275bd1638b141a5f7c2f07bb8657a3fb1045b966a08684aa8a2e076ac038a7278d

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    1.4MB

    MD5

    c1dce8742ba647ac1c6c3c379cc6f533

    SHA1

    0da148745b53a42282966a7530820e524bd30732

    SHA256

    e78534f7869830cfd81049fa4f8d070f2006e739acc050b54cbf2598cb9dc2f1

    SHA512

    94af7d86a8d576a23b95603d81f97d7df87470ef03c63306eb3c7fde055d86e3cd3ba6e17b551627d06f4115a86221268e33bf89ab397e41fe92708b866af6a1

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    1.4MB

    MD5

    46d9fdcd0d6ac43e6c35b9d6dbeb5e6a

    SHA1

    5d33536700a2f7edc3248c7815b060945f06e95b

    SHA256

    ba631f1fe98920b7631ac4c9eb69ca2db9fbe075f2b8e49ad996c29d2d6ac7d1

    SHA512

    d249ec3b1cb65def57bb675bb61e2e9cd7d0d31d76a9fd72f18d8180678c0f742c48eff382b94bd9149c7fa80f785978bd1329287bce55fb9b88cb8fae01a179

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    1.5MB

    MD5

    a84ae33f672ca75e3b90918bd0330744

    SHA1

    3ce4ca889150a807f1f7401ab88f41ba980c5655

    SHA256

    f4b813c60400920e7b495fc13fa5abe8c8dc1426514105942b200deae06c2e0c

    SHA512

    3bd351bd4af2f2e532429c482103b9ef024d174dee5c527f98b51bbe65910646fc4bfaf90a4ca8c61a9f6a3dff6aedbbee0dfe659342d676802b230b93313e35

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    1.4MB

    MD5

    d5d1797bad39d6fba7e1f452c21a170c

    SHA1

    21146a46a2f3bdb6423732439293ed5b78f24407

    SHA256

    e9edbf87f453546c1176aa4db1b63eb2e88ee545dc11c35d8aa8fe00bde191c0

    SHA512

    2e86b65cc9e22f0319bb9cb28365c391427e113be7f26bef110ec572a14351dcabf367af8d250cd778e28105b2b3dde605bba38e287c9cdea2b2b1c366beb942

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    1.4MB

    MD5

    35805fdc4ac54f753c244cd0be6dc746

    SHA1

    554fda05385d7c14a5f233962482fca364bb6a8a

    SHA256

    6e44d6521b819cb979a7d02c133d1db49be42c691ad6f4639f3e69ed75b26d57

    SHA512

    3268ddf556afa560e87abf1694778045b6bbe702a51fc46698717298e38dcd659f3f0f46a11ade739e27b1061401629f96bbcb53c20c517bf0b415c7706289b9

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    1.4MB

    MD5

    2c2ab65a3709cfa2907dca2f32740083

    SHA1

    dfb9fa4c6a19beef2951223d8935cd972a2f90b3

    SHA256

    f520b39fe9f131d1febd23092f52eaff4d430aa1e70d88a0868adbb0e4cc5f3b

    SHA512

    ef6923756b5afdad1f2a61f45dba6ff0c560961d5151b477e3856994d7d847d65b9c8bfc203cdb5111b16b1deb30cb01b04fec322af1acbaeb058c0bc64ca978

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    1.7MB

    MD5

    9612ae6ca8c269bb6d15fc54e8733f0a

    SHA1

    139a628688368789d58551ccea5ad98989c3862e

    SHA256

    209a9ad4ec5b38ea8d53e9ac169f98a956a0b69724e59422eceb4a8343d8d8d7

    SHA512

    628283245f99277834e3c7478e0489c42b922de9a6123c60d8a98c3eaf227c4266816b9619f3f5102a2626b5576eae8763c58c60dc09e817cb700ae661c78d46

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    1.4MB

    MD5

    2a35a9f934fbfcb96005c9187b1b353a

    SHA1

    6a347667157106aeb7b92a42f73a5ce9eddecfdf

    SHA256

    87c70c582efb1e6c0127b695a3774d07980b4190ec34e2f2efdb6f5ff13ef6ef

    SHA512

    6ae4ef9d60f7a2bece3534d1e47ba1877066916d13c6f6abbe305f3f51a9c4b5f2c687426e73caa0a05cccf4471aee8199fd6fcb9b15b15abeba1be96ca5f669

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    1.4MB

    MD5

    46f98d51abce1a9e994dee7701ea84cd

    SHA1

    20aeddd5b905af21d86c48b81e4a7080c28ee5f2

    SHA256

    677b73882b1d587c5c6baa49a3c73b08ddfd94dcb8e14607969b487708a99c02

    SHA512

    3d908b6fd4a97b45335d99b7196adfebdeccacc8c086942cd059dc9aef4f07b5cb038be01100aa55377ffd83e87d1568880859da4789b95e05bf4edba4fefd1b

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    1.6MB

    MD5

    2529bc962475f021530e885178badb0d

    SHA1

    2e39c4569d56c774016fc6d731e39bebda783e67

    SHA256

    6a3012fcae8df7f4170d869b65ed1d3f302f548f93834ce9c88eb25663421f3c

    SHA512

    c9acd96b65533a75a5f716a7f778bdee58369c829341a05d47b6bde8a0820d42109eba2fc9884997b35399cfd61f8d8abe3625218675f1a281b261a04914f3f9

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    1.4MB

    MD5

    718e1b7ebfe5818ef617754ae9586d4a

    SHA1

    d18ae6c87cfbeed0dec3270319a6b4629af12cf6

    SHA256

    1a850baf26c10ad18a1f0f133d71dc83ff15f395c194a3390c1096c3587b55f2

    SHA512

    c0a7b8f0d8684bd36d902bec780cf634586a84b3e9f6788213613f5f8d5c0078550d3a1101d8fb477e9c048e92cdd8b7c8ea161291105192c654426f37c909b4

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    1.4MB

    MD5

    a20106fce5382b8e9e2d4672b806ba22

    SHA1

    253e334ec5da61ff26b3171af9d3e3bdfd4e320b

    SHA256

    d735485a270319c1126d3d3a1d2732e83e00d4f883b65ce71abdcbbbe10188a2

    SHA512

    8a54421766980476020fd46c09f80641f36468a08b64e137de5fded5e1597d9a35041d07314763a121d3b9911752b45b5050546c31089d49658f432abd3fef10

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    1.6MB

    MD5

    f713b82026f5dffbad3bd147f055a0a0

    SHA1

    77696900c9e29f1b40cad986f9749c83ab08d861

    SHA256

    dd88e56e3bbf95ae4786d2ad91d9e3678de576d386e2fdd8cd8819b21414706f

    SHA512

    2c218559c9401bc97780cd645994aa15a21b65c9ed03354a62eb9e0c7d99fa5ee54af4515ccf6d63352386756622e3b6050dbb5699b1b99bdb634f327275e452

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    1.7MB

    MD5

    b8792242e7c2ac6c6d6202bc5ce1cf35

    SHA1

    36f5648d1e85531e9e0ac49e611eddaa89af07f8

    SHA256

    a50353d7ac836295feb7c9245e8520a6829626580ede2e8a4d2821fc762d98fa

    SHA512

    8e1873e0d3f20cefaf9df41207038c22a3fb9cfa7173a9dccc319c5559ac7c5e3b0aa1ce5a53f879a899fc1842fc91ea1671c0831b71306eff1aeefee6b90c24

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1.9MB

    MD5

    96b765f576aded938d101f7433c9a40f

    SHA1

    36fb412927e09dd1d12da81ad035ac87727c795f

    SHA256

    0513ad5168e37b98ba93277053470cdfd8c4c0ab136d7a5d9fd82456776621cf

    SHA512

    64e5616cdc6e76d42bae94ceeccaff0d35538876395008a1977aa74f9065620c3c9bd9f57ae97b217984868d300c450c8ad701e8d27936258cdf22749b4830b2

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    1.4MB

    MD5

    b4b7231277d56a784d7aa7b8d3313a8d

    SHA1

    a2993735e91ba1a4c618f906de9bdcd7150d1699

    SHA256

    eee846f095fa62c9199f75979ada3b1133ba333353435fee04cfb6a988d059bd

    SHA512

    c64707bd85f9f86f127a161f98f2a283b97e7275702794c10dd24b125a52278d0aedc14273ddcb9832492d1384e02ff80d8c5af9e1011cffa62cd73796682888

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    1.4MB

    MD5

    cd24695151fc8a2c1ccf6c9298b7e8ce

    SHA1

    e120b2076790c6e3c234b49f4fa90344371d7e9f

    SHA256

    39287d5dde0afecd07f6021b62ae33e00bc03ddd86b02e5e0b63bfdfb2f930e8

    SHA512

    e6bc022ffab22f41b53942138038987fae6daea43c8898ccae2bf3b9ca109df18a7bcfdcbfb02461e1e41541129ea7f352aacf9bb961faa3b301013497d39468

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    1.4MB

    MD5

    43c46c8c3457918a1ada5adfab3bfa74

    SHA1

    4c8b2cc84ccaf06d438f8979e387fde1abe32370

    SHA256

    56dcf6ae36e359dc5d580b801e978baaa6f91d803b239544a05e00b458dbac8f

    SHA512

    6837f19ef2b5dccc3be1c594ead0d17b9b83b7827af36be199293d87ab20f16646e7ba93556999b80651660bc42edcf877b0e571d5896003afb4238a5e60912b

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    1.4MB

    MD5

    be20c771442b21d8713eb48bdb4f4457

    SHA1

    9d5b98164da13532f4b651ccaa13b2e9ea912e00

    SHA256

    d92fd5fd16dd2cf461d26165c9a47186a753c98ac8fff555ec6431eced709ea3

    SHA512

    443466477e82556689f952b743ba51d54ab86bf9a41112ff33756909068093d9340ca7252f023dca39fc754bb0f89ce77c94d08fc151d6c87f761d9500108f16

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    1.4MB

    MD5

    a66d544d2803c213b3ea4fbefd94fea5

    SHA1

    217fcb45ec7dfe37362a6b3ccac122f0d5e69ed1

    SHA256

    e3cbe5cdf5d59deea382dcb8e5cbb2c6bd5fb1800fef71ebef0330020890e3f6

    SHA512

    d389207413f0ab0dddf5983e7065d52ea72e38c0fbed136f64e0a34259bad7b36c52b4b083ba6f110dcec8490393320509ab2aac0c460b531e603f078398382c

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    1.4MB

    MD5

    fa48a3f145953bc19c52855e079103c4

    SHA1

    3c1b39ba203c49f370c7d185b653e054ad3b898c

    SHA256

    945b571d734b4b65845f5afb4d16bd562689893d998f212015e49aa4a86d9aac

    SHA512

    e0fa002186f45fe9e70b2fbf5a844fb247c3a5460fe7e29527a936dc584a74415fa33dfdd0a7fa6d9aca87620849c9b86a6187484ae0eae4aa164679053b2cfd

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    1.4MB

    MD5

    cbfc884c98e9f9f9c1aad7480d0e0a6d

    SHA1

    de353fcad897d44710e5944ac05b25afa306d706

    SHA256

    15b5b3fabfcf58a6ca853ea55776f0954b2d06a3c5daa311fbf431b77825b6ee

    SHA512

    4f4550011086db3d676428b8a6b5337e54223282263f3f95ab8527b0a81c52661490017e16b93eae89319b54df398a7d3e8cddfb6c67cc808373de0d8fb38a10

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    1.4MB

    MD5

    ca24710cd81646acc04d307b08f64a8b

    SHA1

    89d4ebe14d30b1a465b9e0ede12066e7be6ac938

    SHA256

    17950f3e5f936b525ca2ba43596c0bd50039b5184f38466f8a3c6b3b50c458f7

    SHA512

    0929c36319f1b9ee458802fb89513ea2f227d9a28fc52a996cdd633d8bcfbe1c01c60614c7691fb1245c47ac1b47132e3b43de9ec83a1b08b9ae9fb68fa67caf

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    1.4MB

    MD5

    32c4b4b3713bc6fd36ef95d884612343

    SHA1

    48b1e101bdc75bad4bcb93771b45dc34e09443dd

    SHA256

    7c616a9ecddb49aa81b972dc09d11c1a7ce43de0e80905a56261bcaffdbbdeab

    SHA512

    faf827f5359cb15b93892974c7f2ffc1d51e95b58d36ec2e4105486136684aa09826f7dc3f4d0fe1f5970eb9b5f24c84196323e98ca768e8c1132e2e7afb11d2

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    1.4MB

    MD5

    3781006c3cbcac0f0b0ce39f3d51453b

    SHA1

    c9781e29588f277ee7658b7d9304c99f23af6874

    SHA256

    2d47f6afd9ff07b2f211c9e2bd696a7d0b680fb25706a0b304aa5534cfb2a392

    SHA512

    41195eba0998f00e69b337aeea8c2c4704bdba3d775f0dc1f7bff720ffec6593da6c902371c2569513410c97c800c375278bf4f5854f3ada98a948cf295e727c

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    1.4MB

    MD5

    c3aed25bb6accbec8514b1fe7c281a65

    SHA1

    687b8838a8a493b67d515cb70289718b74094125

    SHA256

    5c185c5fbdf8c952d280f4c101bf5b54a9502ba03fbfdb90372f5a148651f1ce

    SHA512

    00c18580890828f94060387d8c700b44c26ab447a90f9fe14796b1fa2ec36ff76df94ca195e848ec95e7d0d0c1fcd9aff8e68b4e6fe4d8836be561cc48266b7d

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    1.4MB

    MD5

    6c531396bef2fd2c7d707e2b6258b2a7

    SHA1

    4642001d0cec1ed30e71262e4690bc0080f613ae

    SHA256

    dba0dfc26170de5a966ff848a10cd13a7ada03e6a5fc82e8027fed68907f0866

    SHA512

    f1e7789ff6ad88c23404fe02132a718075a8d4af80149e3e6d141a6fd04139e76236e8e269621e48723bffd217ca021f1c5972f4c471f0e650252a3aac22d740

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    1.4MB

    MD5

    0fd5c8935b78244c485b5c5c7235ef9f

    SHA1

    603669bd07c598c908a7f0c4158fed7934149225

    SHA256

    9737903bdea2e129ebde6cda8705d0418f11ef62cd64c74d592bec4d3a7f1589

    SHA512

    abab304ae6b808ca6cd1655ca2452108961525f616d4eb59a6d84c05c1f820113afdd132930ceeff936e1f8bf3cfc26fdaa15e38f86e37a4b47751b75cca7023

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    1.4MB

    MD5

    7c323a4152c3213f8699f369713e852b

    SHA1

    dcfb317917dac8893e5d7d684d5dc617079b6f01

    SHA256

    f648edb5669df700527d6fab5b81b7222be3b894b3009940bab6354c73391e50

    SHA512

    88d29d9d3bcad84bb905116dccc7e616fa7b7b71a445c8b2cf138de7e99c92513335586ba24a4897160f6bbb3ca27203ffa577694fffbce27687037dc613ebb2

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    1.4MB

    MD5

    ab7fd6e3d0a97f8925f86296e7444164

    SHA1

    3d52d170be06edea41c6465503ea70009fc2594f

    SHA256

    a553862d544f1dfbdbfdbb92e424201104711abd567c7f5635d66b39fcb2a0a8

    SHA512

    db8df325b4db0549414842e6175f557008f182777a8cc56f8dc43be88211c94ea031df39890fb8b3179e2792757cbd83ff73dcd9f6c973993bc50f1a147fe455

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    1.4MB

    MD5

    e92be10cd5a8432418698774ad2e237a

    SHA1

    2eed7ec7f66d1e708c37e2ba43351521e52d4804

    SHA256

    6f43f06ae8ba0b0d3595492d105b1ae99473da72f35f0869f737696d8d61367f

    SHA512

    568c37bdf887390ee600cb10138ec4ae93fdf1034d5b7bf2d73a8fa4c6a6e86c4dd2d9ca31b12310b76e8557c892720ecfb25b7e8e35ab6fb9ebb3dea1164feb

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    1.4MB

    MD5

    45e2f4f955d0b607fffefcd2b14c2072

    SHA1

    a38ae03745f9560c540c9e263c301d60272e226d

    SHA256

    bf450bfdb58a510716e345b71766d45376b345af9e74e2bfcc4ce7aac8c6198b

    SHA512

    21e9794a63c605b058103e73a65852e2b57f2e4538f3930932121156cbc6c34de2d6f34badbd80f644d731fdb5ea45d9bc9924a02a77343c93dd7007ec571114

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    1.4MB

    MD5

    084d0113017bbf0b2990c9374ab8480c

    SHA1

    1cbdfc4ef05780b8f809bab47effb610fd6ca4bb

    SHA256

    7572edeba5be15acf73a0f3b6cb1590bb790a36c4832ab75ba74875d171af4f6

    SHA512

    66a67a9d867f19c210a62fabeaff7ebce011f2e1047e3e8752acccef377cfdc425e96922c97dbdd1b3b3b98db217aaac017aabb557db74908c7c6d83214b5bc3

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    1.4MB

    MD5

    ad77f6d43421d0a9f7ff77831686490b

    SHA1

    2485b3816bfa4843747933a7cb90da625f2b48d1

    SHA256

    a858b0a493e76168eb7051aecc1df365ccfa6a629b2df80bc61096a904280259

    SHA512

    a7d67c563bd65ca7a74eea86e928ba7eee9c1fee43ec6c68fa3bf4d05a7b061315a90d5faeadab994dc234aafdb945a0cd3968c52253a5eee683b9a264467b36

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    1.4MB

    MD5

    71748c64f7e11256255dccc433b36ad2

    SHA1

    1357e4d0fb9c6d863c806547aec631acd997e862

    SHA256

    7cffed1e7817bb3725c0bda78131e9bc02694cc70b57e72be77c1026485a5944

    SHA512

    425e407a07246f230fcb41300d3f496172720184be4207acc250567350715609bc005bc3bbef85707b7ce84a5a722ac181d51610552f73b06a18b9542886da02

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    1.4MB

    MD5

    2d523abbf791bfa8cb32f7c4d5b734c4

    SHA1

    71fe9dbe5671d474aaf33631168ae849b9afd2f4

    SHA256

    974020cc2aa6b4c55d7de3f954eb8e1c67fa486f8d6e7785ebe34682451f9847

    SHA512

    69ad91d40a10defd32db71a44715ef57b47bb847d9b6693a69184f0f20c7aa5b7ea7012e206c800b1bc8d85ca04adc1071cb0787c0357551b6c1d8406e7396bd

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    1.4MB

    MD5

    d9f6a1452b6170101c5e51ac6bfb5ba1

    SHA1

    7f029d4f96b5ae26e2fa3a9834b562692cb32ce8

    SHA256

    96bcd5da8c5a3e0cabd7d1272a8f4df511f2695e70c2e9c2cf484861c7da6ea9

    SHA512

    7298aaaf21a93d5d31e9a5402cbc1a7cdd019b1db1fbe2e2f53dc5459cd4d99d9b8f88a9157449731b41c56dc785b16cc70dbd2bd70b5938e7f0fc740c391ac9

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    1.4MB

    MD5

    589e0df53a888f671a57405a85ec3e25

    SHA1

    85094d57c45aa85cbef90808e449f65a3ee2e7e6

    SHA256

    e4d4362028df6e93b841c03a813ada19d1edd6747dfcc44601c87167b28774bd

    SHA512

    5d7c67d3a47c6d86f60d0b22ef874892be5bc9adee030cce6b9c99be7d39f614bf91abebd43bd000075d88127e72f6d0649142b5eef2fe78643fdfa860a1bf3b

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    1.6MB

    MD5

    6b8da00d4a0b246f5c3b66a198c92a0b

    SHA1

    88aa3ff78dfc3bee67983cf62f0de320c5595f0e

    SHA256

    ec671ed69332eb9767d6c3181d603a89903dcbd82469269d47c7e24bd15adae0

    SHA512

    f1f60982c530b423da6a9acf455b1a09be8ddd3327704559ffdc615237118d416ab7747af35c7d7ae947d28d7d353c7239df0beedd10bd49271db4494eb412ad

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    1.5MB

    MD5

    54bf3c39838e1b4660d4eca0a5f12d17

    SHA1

    b8bc8cd550af71612dd68765489038dfe586b29a

    SHA256

    54611c093eed0b53b1dbed282f78b5179b96ffbd0740d845f007c5f3e6e60e2e

    SHA512

    34534859b2329a84b97e1a691e0cd53953b9643833f745583d041f712e37989dfc9983d7242dc3731c821ba4dea553a3f85b864b0bd6e5248f9abbd15619a716

  • C:\Windows\System32\alg.exe

    Filesize

    1.5MB

    MD5

    3dd8fe7d8ba280332f0047f644021911

    SHA1

    9225e90d5672d47c05271e4212e9f63d1333b590

    SHA256

    291aa59e5c4f9c209979e204ca50a7c2c5d115b28dd4aa93f3f091793f16e10d

    SHA512

    b470e37a3afad36f71ad3e69c028317cbf493423ada3f543d58993c46566f4cdf72cf7a54f7b6fceb61f3c72403524129b6d33ce001b0db4122c6c8612bd83a2

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    42506aa8c1440e6e409356812f1e457e

    SHA1

    d761911f756296fddc1572465dbfb27fe22e0f87

    SHA256

    3e6dd5a32bb043c4628c026468535121e0cc7175787da3d0ea2f7fdcf8773440

    SHA512

    bd5cdd99d42865a073354acb42d3217f245bef2e2463fac4086792fe9c3ab5f8e59aecc298f8c45d2cf8fbf9a288bb55b8891533317dfff1f14e2a0bb88c7d34

  • memory/752-41-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/752-48-0x0000000000D70000-0x0000000000DD0000-memory.dmp

    Filesize

    384KB

  • memory/752-49-0x0000000000D70000-0x0000000000DD0000-memory.dmp

    Filesize

    384KB

  • memory/752-42-0x0000000000D70000-0x0000000000DD0000-memory.dmp

    Filesize

    384KB

  • memory/752-248-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/1012-86-0x00000000006F0000-0x0000000000750000-memory.dmp

    Filesize

    384KB

  • memory/1012-88-0x0000000140000000-0x00000001401AF000-memory.dmp

    Filesize

    1.7MB

  • memory/1012-80-0x00000000006F0000-0x0000000000750000-memory.dmp

    Filesize

    384KB

  • memory/1012-252-0x0000000140000000-0x00000001401AF000-memory.dmp

    Filesize

    1.7MB

  • memory/1900-53-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/1900-62-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/1900-63-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/1900-251-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2164-11-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/2164-19-0x0000000140000000-0x000000014018A000-memory.dmp

    Filesize

    1.5MB

  • memory/2164-247-0x0000000140000000-0x000000014018A000-memory.dmp

    Filesize

    1.5MB

  • memory/2164-20-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/3252-25-0x0000000000700000-0x0000000000760000-memory.dmp

    Filesize

    384KB

  • memory/3252-33-0x0000000140000000-0x0000000140189000-memory.dmp

    Filesize

    1.5MB

  • memory/3252-34-0x0000000000700000-0x0000000000760000-memory.dmp

    Filesize

    384KB

  • memory/3572-65-0x0000000000C00000-0x0000000000C60000-memory.dmp

    Filesize

    384KB

  • memory/3572-73-0x0000000140000000-0x00000001401AF000-memory.dmp

    Filesize

    1.7MB

  • memory/3572-75-0x0000000000C00000-0x0000000000C60000-memory.dmp

    Filesize

    384KB

  • memory/3572-71-0x0000000000C00000-0x0000000000C60000-memory.dmp

    Filesize

    384KB

  • memory/3572-78-0x0000000140000000-0x00000001401AF000-memory.dmp

    Filesize

    1.7MB

  • memory/4724-38-0x0000000000400000-0x0000000000590000-memory.dmp

    Filesize

    1.6MB

  • memory/4724-1-0x00000000021F0000-0x0000000002257000-memory.dmp

    Filesize

    412KB

  • memory/4724-6-0x00000000021F0000-0x0000000002257000-memory.dmp

    Filesize

    412KB

  • memory/4724-0-0x0000000000400000-0x0000000000590000-memory.dmp

    Filesize

    1.6MB